Client-side authentication?

[vdavez]

Using node and browserify, it is possible to use the crypto module in the browser--at least for sha-256. This means that client-side checksums can be a thing. Which could be good for the end-user and reduces drain on the server. You'd still need to check the hash against the DB, but you're not actually using the server to do the computation. So that's neat.